proton-pass
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts for the Proton Pass CLI from the official proton.me domain using curl and Invoke-WebRequest.
- [REMOTE_CODE_EXECUTION]: Executes remote installation scripts via shell piping (curl | bash). These operations are directed to a well-known service and are part of the standard setup process.
- [COMMAND_EXECUTION]: Includes commands that interact with the local filesystem, such as importing SSH keys from the .ssh directory and managing environment variables.
- [SAFE]: The skill follows security best practices for secret management, such as recommending the use of secret files over plain-text environment variables and providing instructions for the secure deletion of temporary sensitive files.
Audit Metadata